CVE-2024-0187

The Community by PeepSo WordPress plugin before 6.3.1.2 does not sanitise and escape various parameters and generated URLs before outputting them back attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-0187

creationtimestamp| type| source ---|---|--- 2024-01-23 19:17:36+00:00| seen| https://t.me/ctinow/172235 2024-02-06 13:46:54+00:00| seen| https://t.me/ctinow/179979 2025-05-22 17:43:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17330...

CVE-2024-0187 Community by PeepSo < 6.3.1.2 - Reflected XSS

The Community by PeepSo WordPress plugin before 6.3.1.2 does not sanitise and escape various parameters and generated URLs before outputting them back attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-0187 Community by PeepSo < 6.3.1.2 - Reflected XSS

The Community by PeepSo WordPress plugin before 6.3.1.2 does not sanitise and escape various parameters and generated URLs before outputting them back attributes, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...